Bahaa Naamneh

O problema está relacionado a erros de desreferência de ponteiro na plataforma Microsoft .NET. A exploração dessa vulnerabilidade pode permitir que um invasor remoto cause uma negação de serviço.

Uma falha relacionada à manipulação de links simbólicos permite que um usuário local autenticado obtenha, potencialmente, uma escalada de privilégios. Isso é feito adicionando uma entrada no Registro, na pasta de Registro do Trellix ENS, com um link simbólico para arquivos aos quais o usuário normalmente não teria permissão de acesso. Após uma verificação, o Engine seguiria os links e removeria os arquivos.

The issue arises from the improper handling of NULL fields in PKCS12 files, leading to a potential Denial of Service attack. Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly due to a NULL pointer dereference. The affected OpenSSL APIs are: `PKCS12 parse()`, `PKCS12 unpack p7data()`, `PKCS12 unpack p7encdata()`, `PKCS12 unpack authsafes()`, and `PKCS12 newpass()`.

The issue is related to an inappropriate implementation in the Installer component of Google Chrome, which allowed a local attacker to bypass discretionary access control via a crafted command. This could potentially enable an attacker to circumvent existing security restrictions. The vulnerability is related to incorrectly implemented security checks for standard elements, and exploitation may allow a remote attacker to bypass security restrictions using a specially crafted HTML page.

A privilege escalation issue could allow a local attacker to unintentionally delete privileged Trend Micro registry keys, including its own protected registry keys, on affected installations.

A buffer overflow issue exists, allowing remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted mcw file.

The issue is related to multiple buffer overflows that can be triggered by remote attackers using crafted values in a profile file. This can lead to a denial of service and potentially allow the execution of arbitrary code. An example of such exploitation is through the use of a long `SysName` field.

Name of the Vulnerable Software and Affected Versions: Escapade Scripting Engine (ESP) (affected versions not specified) Description: A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary script via the `method` parameter. This can be demonstrated using the `PAGE` parameter. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: FTP Desktop client versions 3.5 and earlier Description: The issue is related to multiple heap-based buffer overflows that can be triggered by remote malicious servers. This can occur through a long FTP banner, a long response to a `USER` command, or a long response to a `PASS` command. This allows the malicious server to execute arbitrary code. Recommendations: For FTP Desktop client versions 3.5 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Escapade Scripting Engine (ESP) (affected versions not specified) Description: The issue allows remote attackers to obtain sensitive path information via a malformed request. This is achieved by exploiting the `PAGE` parameter, which leaks the information in an error message. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.